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PRE-APPEAL BRIEF REQUEST FOR REVIEW 

Sir: 

In response to the Final Office Action mailed from the U.S. Patent and Trademark 
Office on October 23, 2008, Applicant requests review of the final rejection in the above- 
identified application. This request is being filed with a Notice of Appeal and required 
fee. An extension of time is requested and this response is accompanied by the fee 
required under 37 C.F.R. 1 .136(a). The Commissioner is hereby authorized to charge any 
additional fees which may be required at any time during the prosecution of this 
application without specific authorization, or credit any overpayment, to Deposit Account 
No. 50-2117. 

No amendments are being filed with this request. The review is requested for the 
reasons stated in the remarks below. 

STATUS OF CLAIMS 
Claims 1-7 and 10-19 are pending in this application. 

The Office Action dated October 23, 2008, rejects claims 1-7 and 10-15 under 35 
U.S.C. § 103(a) as being unpatentable over "Handbook of Applied Cryptography" 
(Menezes) in view of US 6,044,350 (Weiant). The Office Action also rejects claims 16- 
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19 under 35 U.S.C. § 103(a) as being unpatentable over US 5,850,443 (Van Oorschot) in 
view of US 5,796,840 (Davis). 

REMARKS 

The rejections of claims 1-7 and 10-19 under 35 U.S.C. § 103(a) are respectfully 
traversed. 

Rejection of claims 1-7 and 10-15 as beins unpatentable overMenezes in view ofWeiant 
Applicants respectfiilly submit that the Menezes reference or the combination of 
Menezes and Weiant does not teach or suggest all the claim limitations as set forth in 
independent claims 1 and 10. Specifically, claim 1 recites "a first key for performing 
asymmetric operations at a first rate ." "a second key for performing an asymmetric 
cryptographic processing operation to update the first key ." and "the second key is used 
in cryptographic processing operations for the first key at a second rate that is less often 
than the first rate ." These specific limitations are not taught or suggested in Menezes or 
the combination of Menezes and Weiant. 

Menezes discloses a key layering technique for distributing cryptographic keys 
when confidentiality of the private and symmetric keys must be preserved. The key 
layering technique consists of master keys at the highest level, key-encrypting keys, and 
data keys. The data keys are used to perform cryptographic operations on user data. The 
asynmietric signature private keys considered as data keys are usually longer-term keys. 
The key-encrypting keys are encryption public keys used for key transport or storage of 
other keys. The key-encrypting keys are used as long-term keys that have higher time 
period over which it is valid. 

Applicants respectfully disagree with the statement in item 4, pages 2-3, of the 
final Office Action that "Menezes et al. teaches an asymmetric cryptographic processing 
system. . .comprising: A first key for performing asymmetric operations at a first 
rate. . .(Page 552, step 3, data keys, provide cryptographic operations on user data, tend to 
be short-term keys)." Office Actions appears to equate Applicants' "first key" with 
Menezes's "data keys." However, Menezes discloses that the data keys considered as 
asynmietric signature private data keys are usually longer-term data keys. Further in 



2 



USPTO Application No.: 10/049,812 



Motorola Docket No.: D02236-03 USA 



Menezes, the longer-term key is defined as the time period over which the data key is 
valid. See page 553, lines 3-5 of Menezes. Thus, Menezes discloses the time period 
(long-term or short-term) over which the data key is valid, and makes no mention of the 
rate (fi-equent or infrequent use) at which the data key is used for performing asymmetric 
operations. In contrast, Applicants' claim recites "a first key for performing asymmetric 
operations at a first rate ." 

Further, the final Office Action, in item 4, pages 2-3 states that "Menezes et al. 
teaches an asymmetric cryptographic processing system. . .comprising. . .A second key for 
performing an asymmetric cryptographic processing operation to update the first key 
(page 552, step 2, key-encrypting keys)." The Office Action appears to equate 
AppHcants' "second key" with Menezes's "key-encrypting key." However, Menezes 
discloses a key layering technique for distributing the cryptographic keys when 
confidentiality of the private and symmetric keys must be preserved. Further, Menezes 
discloses that the key-encrypting keys are used for key transport or storage of other keys. 
Thus, Menezes, at most, uses the key-encryption key to transport or distribute other keys, 
and not for updating the data keys at a particular rate . In contrast. Applicants' claim 
recites "a second key for performing an asymmetric cryptographic processing operation 
to update the first key ." 

Additionally, Menezes simply discloses that the key-encrypting key is used to 
transport other keys, and also discloses a time period over which the key-encrypting key 
is valid. However, Menezes makes no mention of the rate at which the key-encryption 
key is used to update the data key (equated to Applicants' first key), and also makes no 
mention of the rate at which the data key is updated is less than the rate at which the data 
key is used for performing asjmmietric crj^tographic operations. In contrast, Applicants' 
claim recites "the second key is used in cryptographic processing operations for the first 
key at a second rate that is less often than the first rate and that requires a second 
cryptographic processing time greater than the first cryptographic processing time." 

Further, the Weiant reference describes a system for a general-purpose computer 
that includes a digital certificate meter to certify an electronic commerce purchase by a 
user. For each purchase, the user interacts with the digital certificate meter to select a 
service rate that the system adds to the purchase to indemnify the purchase for a given 
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amount. The user selects the service rate from a table of security and indemnification 
rates that the system displays to the user. However, Weiant also fails to describe the 
above mentioned claim limitations. Therefore, the Menezes reference or the combination 
of Menezes and Weiant does not teach or suggest the above mentioned claim limitations 
as recited in Applicants' claim 1. Accordingly, Applicants respectfully request 
withdrawal of the rejection of claim 1. 

Regarding independent claim 10, Applicants respectfully submit that the above 
discussed arguments apply equally to the limitations of claim 10. Applicants therefore 
respectftiUy request withdrawal of the rejection of claims 1 and 10 under 35 U.S.C. § 
103(a). Dependent claims 2-7 and 11-15 depend from, and include all the limitations of 
independent claims 1 and 10. Therefore, Applicants respectftiUy request the 
reconsideration of dependent claims 2-7 and 11-15 and request withdrawal of the 
rejection. 

Rejection of claims 16-19 as being unpatentable over Van Oorschot in view of Davis 
The final Office Action, on page 8, states "Van Oorschot et al. does not teach 
wherein the first key updates the cr5^tographic key; and wherein the cryptographic key, 
the first key, and the second key encrypt and decrypt data using a similar class of 
algorithm to encrypt and decrypt data." Applicants agree that Van Oorschot does not 
disclose this. Applicants respectfully submit that the Office Action is incorrect in stating 
(at page 8) that "Davis teaches wherein the first key updates the cryptographic key (col. 
6, lines 7-27); and wherein the cryptographic key, the first key, and the second key 
encrj^t and decrj^t data using a similar class of algorithm to encrypt and decrypt data 
(fig. 7, all use asjnnmetric key for encryption and decryption)." 

Davis discloses a method for providing a secured communications between a 
system incorporating a cryptographic semiconductor device and a device in remote 
communications with the system. The cryptographic semiconductor device includes a 
hardware agent placed onto a certification system which establishes an electrical 
connection to the hardware agent and the certificate system. The certificate system 
includes a storage device for storage of prior generated public keys. Further, the hardware 
agent initiates a configuration sequence which is ftirther used by a random number 
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generator to generate a specific public/private key pair. The generated public/private key 
pair is then sent to the certification system where the key pair is compared to the storage 
device of the prior generated public keys, and then updated with this new public/private 
key pair. Thus, in Davis, the stored key pair is updated by the internally generated public 
/private key pair, and not updated by the distributed encrypted key pair received fi-om the 
transmitter. In contrast, Applicants' amended claim recites "distributing the encrypted 
first key, wherein the distributed first key updates the cryptographic key." 

Therefore, the combination of Van Oorschot and Davis does not teach or suggest 
the above mentioned claim limitation as recited in Applicants' claim 16, and Applicants 
respectfiiUy request withdrawal of the rejection of claim 16. Dependent claims 17-19 
depend fi-om, and include all the limitations of independent claim 16. Therefore, 
Applicants respectfully request the reconsideration of dependent claims 17-19 and 
request withdrawal of the rejection. 

Claims not specifically mentioned above are allowable due to their dependence on 
an allowable base claim. In light of the arguments presented above, it is respectfiiUy 
submitted that all pending claims are in condition for allowance. Reconsideration and 
withdrawal of the final rejection of the claimed invention is respectfiiUy requested. 



Respectfully submitted, 
ERIC J. SPRUNK, et al. 



Date: April 23. 2009 



BY: /Stewart M. Wiener/ 



MOTOROLA, INC. 
101 Tournament Drive 
Horsham, PA 19044 



Stewart M. Wiener 
Registration No. 46,201 
Attorney for Applicant 



Telephone: (215)323-1811 
Fax: (215)323-1300 
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